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WHAT IS CLAIMED IS: 

1 . A security deciphering apparatus comprising: 

a hidden secret key storing unit for storing a hidden secret key (Kh) corresponding 
to intrinsic identification information; 
5 a first decoding unit for receiving via a public network a personal secret key 

({Ks}Kh), generated by enciphering a cipher key (Ks) by using the hidden secret key 
(Kh), and decoding the personal secret key ({Ks}Kh) by using the hidden secret key 
(Kh), thereby obtaining the cipher key (Ks); and 

a second decoding unit for receiving via the public network enciphered data 
1 0 ( {M} Ks), generated by enciphering data (M) by using the cipher key (Ks), and decoding 
the enciphered data ({M}Ks) by using the cipher key (Ks), thereby obtaining the data 

CM)- 

2. The security deciphering apparatus according to claim 1, further comprising: 

a personal secret key storing unit for storing the personal secret key ({Ks}Kh) 
15 received via the public network, and outputting the stored personal secret key ({Ks}Kh) 
to the first decoding unit under a control of the first decoding unit; and 

a cipher key storing unit for storing the cipher key (Ks) obtained by the first 
decoding unit, and outputting the stored cipher key (Ks) to the second decoding unit 
under a control of the second decoding unit. 

20 3. A data service providing apparatus for providing data requested by a 

communication terminal, comprising: 

a data database for storing data (M) to be provided to the communication terminal; 
a hidden secret key database for storing a hidden secret key (Kh) corresponding to 
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intrinsic identification information of a security deciphering module equipped in the 
communication terminal to decipher enciphered data; 

a transmitting/receiving unit for performing communication with the 
communication terminal via a public network; 
5 a data enciphering unit for enciphering the data (M) by using a cipher key (Ks); 

a cipher key enciphering unit for enciphering the cipher key (Ks) by using the 
hidden secret key (Kh); and 

a control unit for controlling the enciphering operations of the data and cipher key 
enciphering units, and controlling the transmitting/receiving unit to provide the 
10 enciphered data ({M}Ks) and the personal secret key ({Ks}Kh) via the public network. 

4. The data service providing apparatus according to claim 3, wherein the security 
deciphering module comprises: 

a hidden secret key storing unit for storing the hidden secret key (Kh) 
corresponding to the intrinsic identification information of the security deciphering 
15 module; 

a first decoding unit for decoding the personal secret key ({Ks}Kh) provided by 
the transmitting/receiving unit, by using the hidden secret key (Kh), thereby obtaining the 
cipher key (Ks); and 

a second decoding unit for decoding the enciphered data ({M}Ks) provided by the 
20 transmitting/receiving unit, by using the cipher key (Ks), thereby obtaining the data (M). 

5. The data service providing apparatus according to claim 4, wherein the security 
deciphering module further comprises: 

a personal secret key storing unit for storing the personal secret key ({Ks}Kh) 
provided by the transmitting/receiving unit, and outputting the stored personal secret key 
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({Ks}Kh) to the first decoding unit under a control of the first decoding unit; and 

a cipher key storing unit for storing the cipher key (Ks) obtained by the first 
decoding unit, and outputting the stored cipher key (Ks) to the second decoding unit 
under a control of the second decoding unit. 

5 6. A security deciphering method comprising the steps of: 

determining whether or not a personal secret key ({Ks}Kh), generated by 
enciphering a cipher key (Ks) by using a hidden secret key (Kh) corresponding to intrinsic 
identification information, is received; 

if it is determined that the personal secret key ({Ks}Kh) is received, then decoding 
10 the received personal secret key ({Ks}Kh) by using the hidden secret key (Kh), thereby 
obtaining the cipher key (Ks); 

determining whether or not enciphered data ({M}Ks), generated by enciphering 
data (M) requested to be transmitted by using the cipher key (Ks), is received; and 

if it is determined that the enciphered data ({M}Ks) is received, then decoding the 
15 enciphered data ({M}Ks) by using the cipher key Ks, thereby obtaining the data (M). 

7. A data service providing method for providing data requested by a 
communication terminal, comprising the steps of: 

receiving via a public network a request for transmission of data (M) from the 
communication terminal; 
20 enciphering the data (M) by using a cipher key (Ks) in response to the received 

data transmission request, thereby generating enciphered data ({M}Ks); 

enciphering, in response to the received data transmission request, the cipher key 
(Ks) by using a hidden secret key (Kh) corresponding to intrinsic identification 
information assigned to a security enciphering module equipped in the communication 
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terminal to decode the enciphered data ({M}Ks), thereby generating personal secret key 
({Ks}Kh);and 

transmitting the enciphered data ({M}Ks) and the personal secret key ({Ks}Kh) to 
the communication terminal via the public network. 

8. The data service providing method according to claim 7, wherein the security 
enciphering module equipped in the communication terminal comprises: 

a hidden secret key storing unit for storing the hidden secret key (Kh) 
corresponding to the intrinsic identification information assigned to the security 
enciphering module; 

a first decoding unit for decoding the personal secret key ({Ks}Kh) by using the 
hidden secret key (Kh), thereby obtaining the cipher key (Ks); and 

a second decoding unit for decoding the enciphered data ({M}Ks) by using the 
obtained cipher key (Ks), thereby obtaining the data (M). 

9. The data service providing method according to claim 8, wherein the security 
deciphering module further comprises: 

a personal secret key storing unit for storing the personal secret key ({Ks}Kh) 
received by the communication terminal via the public network, and outputting the stored 
personal secret key ({Ks}Kh) to the first decoding unit under a control of the first 
decoding unit; and 

a cipher key storing unit for storing the cipher key (Ks) obtained by the first 
decoding unit, and outputting the stored cipher key (Ks) to the second decoding unit 
under a control of the second decoding unit. 

10. In a mobile communication terminal receiving, via a public network, 
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enciphered data ({M}Ks) generated by enciphering data (M) by using a cipher key (Ks), a 
security deciphering apparatus comprising: 

a hidden secret key storing unit for storing a hidden secret key (Kh) corresponding 
to intrinsic identification information assigned to the mobile communication terminal; 

a first decoding unit for receiving a personal secret key ({Ks}Kh), generated by 
enciphering a cipher key (Ks) by using the hidden secret key (Kh), and decoding the 
personal secret key ({Ks}Kh) by using the hidden secret key (Kh), thereby obtaining the 
cipher key (Ks); and 

a second decoding unit for decoding the enciphered data ({M}Ks) by using the 
cipher key (Ks), thereby obtaining the data (M). 
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